Diskettes, zip disks, CDs, DVDs are covered under 'Device and Media Controls.'
Determine through risk assessment if you need to encrypt or not. Encryption is addressable.
Personal opinion - non-encrypted through the mail is fairly risky (especially if sent regular mail, not express or
Title: Message
Consider the following corollary:
The
Security Rule does not proscribe encryption for electronic transmissions of
data. This is an addressable element that must be assessed by the
covered entity. However,as long as the method of transmission is
considered secure
